CVE-2026-12576 DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability

DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability...

EUVD-2026-40439

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unnamed /updates requests without defaultChannel implicitly resolve to a single hidden winner channel. An authorized app or channel manager can create ambiguous default update stat...

CVE-2026-41579

Technical details beyond the Initial Description are not provided in the connected documents; monitor for updates.

CVE-2026-41579 runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when setting up the container rootfs, setupPtmx and setupDevSymlinks call os.Remove and os.Symlink with a filepath.Join strin...

CVE-2026-12576: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability...

PT-2026-57502

RELATE creates an edge record between two existing records, and SurrealDB enforces the CREATE permission on the edge table for this operation. When the statement included a SET id = edge:existing clause, however, the new edge's id ended up pointing at an record that was already in storage. Rather...

ROS-20260701-73-0051

The vulnerability of the functions hcilinkkeysclear, hcismpltksclear, hcismpirksclear, and hciblockedkeysclear in the net/bluetooth/hcicore.c module of the Linux operating system’s Bluetooth subsystem is related to the reallocation of previously freed memory. Exploiting this vulnerability could...

PT-2026-121258

Уязвимость компонента net/netfilter/nf nat sip.c ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность...

NVIDIA Virtual GPU Manager Guest driver compromise Data Compromise

The vulnerability of the NVIDIA Virtual GPU Manager and the Guest driver for NVIDIA Virtual GPUs is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux dm-Data Compromise Buffer Overflow

The vulnerability of the dmintegritydtr function in the drivers/md/dm-integrity.c file of the multi-device RAID and LVM driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

nghttp2 Component Data Compromise

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Linux kernel networking function Heap Buffer Overflow DoS

The vulnerability of the monhandleauthdone function in the net/ceph/monclient.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

NETAMS WNAM user management Data Compromise

The vulnerability of NETAMS WNAM user management software lies in the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

NVIDIA Virtual GPU Guest Driver Data Compromise

The vulnerability of NVIDIA Virtual GPU’s guest driver components is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Dell PowerFlex Manager Authentication Bypass

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack are related to errors in the authentication process. Exploiting these vulnerabilities can allow unauthorized actors to compromise t...

NVIDIA Virtual GPU Manager Data Compromise

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2026-54514

DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability...

CVE-2026-56328

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unnamed /updates requests without defaultChannel implicitly resolve to a single hidden winner channel. An authorized app or channel manager can create ambiguous default update stat...

nodejs: Node.js: Unauthorized file metadata modification

A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...